Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier: rx1Zxd4+zXGHUCK7Epql7PAmHWAl59lqWeOniWzl2RQ=
Subject key identifier: A1:F3:33:65:6E:EF:43:05:AF:2E:6C:17:F0:95:0C:96:7B:E5:F8:6E
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 019D9A3ED974096190A4EE6C55D91066A5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:01:43 +0000
Manifest this update: Fri 17 Apr 2026 07:01:43 +0000
Manifest next update: Sat 18 Apr 2026 07:01:43 +0000
Files and hashes: 1: _8hAdBxzAFnC0h4YarC8ytTSTGE.roa (hash: P9q9yQrfO57XlgsnKPc4SR32XLQFXVVcR1r9ax6Sjng=)
2: p51paCtDfiOnAaAA1ioOisOtxo0.roa (hash: 41VX6c9PC5idlzihRVbcgNzJbqLU5GMDkw+tX1NEw4g=)
3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: pJZAlYLkKuORLBJ5uzW3gRyfaiKfHV+jW8Lwl0wEHik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d9:74:09:61:90:a4:ee:6c:55:d9:10:66:a5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Apr 17 07:01:43 2026 GMT
Not After : Apr 18 07:01:43 2026 GMT
Subject: CN=a1f333656eef4305af2e6c17f0950c967be5f86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:15:69:9f:8b:38:f8:43:a6:cb:74:ab:9c:
16:f4:84:5c:b5:55:ab:83:b5:7e:e8:16:dc:fd:3e:
29:ed:01:30:6b:0f:21:3e:a8:fd:75:fc:1e:40:d3:
8b:74:63:fb:ae:7f:f5:e4:dc:30:6b:cd:05:2e:a0:
0d:0e:e9:73:0e:de:a3:26:91:75:6b:b0:53:6f:cc:
9f:3b:05:d8:52:a2:09:7a:18:b8:02:a7:03:c6:bf:
d9:ec:71:76:73:25:90:0f:ed:c7:92:c3:51:d0:32:
6e:4b:ef:33:49:1a:bc:00:67:12:8c:06:2b:9c:59:
a5:ac:37:3d:85:87:12:ca:82:ec:ea:5e:1b:2e:0d:
56:26:53:aa:56:06:39:6f:9d:51:cf:ad:17:df:9f:
c3:d9:6b:d1:f1:f7:8b:96:39:53:cf:60:e1:55:4b:
9d:b5:0b:dd:9f:50:d8:e2:6e:38:64:81:f4:28:2f:
21:9c:e0:02:07:4a:44:2b:4f:46:7f:88:89:18:97:
f7:a9:b3:64:aa:86:a6:67:88:50:c9:79:f9:b5:5a:
d5:f8:34:ca:3b:67:99:df:2f:27:9d:a5:96:30:0b:
c8:d9:17:45:1f:b6:91:2a:b5:82:4d:bb:1b:e0:70:
cd:53:8b:5e:0e:0d:8f:ee:e1:9c:5a:85:70:88:ca:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:33:65:6E:EF:43:05:AF:2E:6C:17:F0:95:0C:96:7B:E5:F8:6E
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d6:5d:ac:78:be:bd:d2:42:e2:ed:d0:54:61:d8:b3:d0:16:
bb:03:4d:62:82:7e:d6:5c:87:74:18:16:7b:1a:9c:3e:04:36:
70:1c:36:a5:55:19:eb:21:e0:d1:e4:32:f8:80:25:0f:d7:52:
09:34:9c:2e:c7:80:88:73:8d:ac:7e:6a:33:65:e4:a5:db:a7:
19:e9:9e:51:59:a8:a3:73:33:be:2e:6f:24:b1:6a:22:3b:13:
99:f2:10:37:fd:2a:b6:17:27:f9:f8:c5:69:c2:01:0b:ec:5f:
a1:81:37:7f:25:dd:7d:7a:11:8a:cb:51:4d:04:56:82:fa:43:
c9:48:71:45:05:4d:a6:28:99:c5:42:13:4a:f1:ed:3b:83:19:
74:de:24:12:75:e7:18:b9:45:f9:2c:7e:8d:18:e1:c6:24:1a:
49:6a:8f:35:13:65:d9:90:40:43:b8:bb:89:e5:ce:7b:4a:f0:
a9:05:d3:7e:ec:45:f4:9c:2f:62:c9:b0:70:db:ab:e0:dc:14:
3c:2f:47:7f:87:4e:1d:e8:22:0d:6b:dc:c4:6e:f6:bd:aa:0e:
61:93:16:a6:a1:36:1c:59:25:12:a4:db:41:db:ce:19:ae:48:
81:83:67:29:28:a9:d5:3e:f6:8d:de:52:98:3a:11:89:b1:e4:
ea:50:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:13 2026 by rpki-client